Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-xdviUpgrade tetex-docUpgrade tetex-afmUpgrade tetex-dvipsUpgrade tetex-fontsUpgrade tetex-latexUpgrade tetex | Dec 1, 2016 | Nov 13, 2007 |
| Debian | — | Upgrade texlive-bin | Jul 30, 2024 | Nov 13, 2007 |
| Gentoo Linux | — | Upgrade app-text/tetex. | Oct 30, 2017 | Nov 13, 2007 |
| Suse | — | Upgrade te_amsUpgrade te_webUpgrade texlive-bin-develUpgrade te_ptexUpgrade texlive-binUpgrade texlive-bin-cjkUpgrade te_kpathUpgrade texlive-bin-metapostUpgrade te_dviljUpgrade suse-releaseUpgrade texlive-bin-dviljUpgrade texlive-bin-latexUpgrade te_contUpgrade texlive-bin-xetexUpgrade texlive-bin-omegaUpgrade te_nfsUpgrade te_latexUpgrade te_omegaUpgrade te_eplaiUpgrade tetexUpgrade te_mpost | Feb 17, 2015 | Nov 13, 2007 |
| Ubuntu | — | Upgrade tetex-binUpgrade texlive-extra-utils | Nov 8, 2024 | Nov 13, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub